Third-party test reports are the evidence backing every CPSC certificate you file. EntryProof accepts the raw PDF, keeps it attached to the SKU, and re-runs the readiness score whenever a new report arrives. This guide walks the upload flow, the accepted formats, the storage model, and how the parsed data flows into your Children's Product Certificate (CPC) or General Certificate of Conformity (GCC).
Step 1: Open the SKU
Sign in to EntryProof and pick the SKU on your dashboard. Every SKU has a Reports tab. If the SKU doesn't exist yet, create it first: title, ASIN or SKU code, product category (the CPSC-mapped children's-product category if applicable, per the CPSC business guidance on cpsc.gov).
Step 2: Drag the PDF in
Drag your lab-generated PDF into the drop zone. Accepted formats: PDF (preferred, retains vector text so we can parse), PDF/A (long-term archival PDF), and image PDFs (we run OCR, but parsing accuracy drops to ~92% for image-only reports so prefer text PDFs when the lab offers both). Maximum file size is 25 MB. Reports larger than that are rare and almost always contain scanned pages that can be flattened; email support@digitalempireholdings.com if you have a genuinely larger report.
Step 3: Match to a testing standard
After upload, EntryProof runs a text parse and proposes a match to a CPSC-recognized testing standard (16 CFR Part 1303 lead paint, 16 CFR Part 1500 hazardous substances, CPSIA total lead content 15 U.S.C. 1278a, ASTM F963-17 toy safety, or one of the ~40 other CPSC-referenced standards). The full list is maintained in the Code of Federal Regulations on ecfr.gov, Title 16, Chapter II. If the proposed match is wrong, correct it from the dropdown and the score recalculates.
Step 4: Confirm the lab is CPSC-accepted
The CPSC maintains a public list of Accepted Third Party Testing Labs. Every report EntryProof parses is checked against the lab name and address on the report. If the lab is not accepted for the standard being tested, a critical-severity finding fires on your readiness score, because certificates backed by non-accepted labs are legally worthless. The lab list is at CPSC's Accepted Third Party Testing Labs page on cpsc.gov.
Step 5: Review parsed fields
EntryProof extracts and stores: lab name, lab CPSC accreditation number, report ID, test date, sample lot code, standard tested, pass/fail per line, and the responsible signer. All fields are shown in the Reports tab, editable if the parse missed anything.
Storage and security
Reports are stored in an S3-compatible object store with server-side AES-256 encryption at rest and TLS 1.3 in transit. Access is scoped to your account only; no cross-account read is possible. The account-level access log records every download event. Our security disclosure page and the FTC's data security guidance for small businesses on ftc.gov cover the general posture; the security disclosure article covers the deletion timeline.
What happens next
Once the report is parsed and the lab is confirmed accepted, EntryProof enables the "Generate certificate" button. The downloading GCC/CPC certificates article walks that step.
Related articles
FAQ
Can I upload a report I received in an email as an attachment? Yes, save the PDF locally first and drag it in. We're evaluating a "forward the email" upload path but it's not shipped yet.
Does the parser handle non-English reports? English, Simplified Chinese, and Traditional Chinese today. If the lab report is in another language, the parser falls back to a metadata-only extract and prompts you to fill fields manually.
Do I need one report per SKU or per shipment? Per SKU per relevant standard, as CPSC guidance in 16 CFR Part 1107 on ecfr.gov requires re-testing when materials change; one report can cover many shipments as long as material sourcing is unchanged.
Still stuck? Email support@digitalempireholdings.com or support@digitalempireholdings.com.